High · 8.4 CVE-2019-3682 EUVD-2019-13317GHSA-jh4h-8jgf-wfh2

Insecure API port exposed to all Master Node guest containers

Published Jan 17, 2020 · Updated Sep 17, 2024 · Assigned by suse

Description

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

Vendor	Product	Affected	Fixed
SUSE	SUSE CaaS Platform 3.0	docker-kubic – < 17.09.1_ce-7.6.1	17.09.1_ce-7.6.1